Re: setting up postscreen on a system with multiple external interfaces

[Erik Slagter]

If I set up postscreen as closely as possible to the postscreen README document, I get this (diff to previous message) (I'm sorry lots of it has been folded). The log says "address already in use for 10.1.1.1", this is interesting because none of the changes involved 10.1.1.1.

--- a   2013-02-21 16:37:18.348109048 +0100
+++ b   2013-02-21 17:25:24.337265305 +0100
@@ -8,7 +8,7 @@

 * Postfix logging



 * Postconf -n

@@ -93,7 +93,7 @@

 * Postfinger

-Postfinger - postfix configuration on do feb 21 16:32:28 CET 2013
+postfinger - postfix configuration on do feb 21 17:24:49 CET 2013
 version: 1.30

 Warning: postfinger output may show private configuration information,
@@ -178,7 +178,10 @@
 virtual_alias_maps = hash:/etc/postfix/virtual

 --master.cf--
-mx1.ipv4.slagter.name:smtp     inet    n       -       n       -       2       
smtpd
+smtp                           inet    n       -       n       -       1       
postscreen
+dnsblog                                unix    -       -       n       -       
0       dnsblog
+tlsproxy                       unix    -       -       n       -       0       
tlsproxy
+mx1.ipv4.slagter.name:smtp     pass    n       -       n       -       2       
smtpd
        -o myhostname=eriks.xs4all.nl
        -o smtpd_banner=mx1.slagter.name-ESMTP-$mail_name-mx1-ppp0-ipv4-25
        -o smtpd_tls_security_level=may
@@ -187,7 +190,7 @@
        -o smtpd_proxy_filter=nemesis.ipv4:10025
        -o soft_bounce=no
        -o postscreen_cache_map=btree:$data_directory/postscreen_cache-ipv4
-mx1.ipv6.slagter.name:smtp     inet    n       -       n       -       2       
smtpd
+mx1.ipv6.slagter.name:smtp     pass    n       -       n       -       2       
smtpd
        -o myhostname=mx1.ipv6.slagter.name
        -o smtpd_banner=mx1.slagter.name-ESMTP-$mail_name-mx1-ppp0-ipv6-25
        -o smtpd_tls_security_level=may
@@ -288,3 +291,6 @@
 -- end of postfinger output --

-None relevant (really! the logging is exactly the same for postscreen and non-postscreen operation, up to the problem the problem occurs). +Feb 21 16:46:03 nemesis-vlan1 postfix/master[28268]: fatal: bind 10.1.1.1 port 25: Address already in use

smime.p7s
Description: S/MIME Cryptographic Signature